Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
File:                     NMONZkm5DWjTzmwJ8euU0-V5_J0.mft (raw, json)
Hash identifier:          MEsuWXrNfXW/RGafJHa9SaEY7R+GdvUSPm8K42VfXck=
Subject key identifier:   4C:D2:30:3B:58:DE:78:6E:7B:02:62:AE:66:B7:64:FF:E8:A9:8C:D6
Authority key identifier: 34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D
Certificate issuer:       /CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
Certificate serial:       0EBF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
Manifest number:          0EB3
Signing time:             Tue 12 May 2026 17:43:16 +0000
Manifest this update:     Tue 12 May 2026 17:43:16 +0000
Manifest next update:     Tue 19 May 2026 17:43:16 +0000
Files and hashes:         1: NMONZkm5DWjTzmwJ8euU0-V5_J0.crl (hash: 9gmuLZOvzApBr0RFhhziCoTjzyzlePZebU0VLvMSQK4=)
                          2: 54AE11C6AD3211E9B3BC7385C4F9AE02.roa (hash: dp3B1RDsd11FNh3UQSta7bEw7zg/YxUAJYRv+iUtn2g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl
                          rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3775 (0xebf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192491, serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
        Validity
            Not Before: May 12 17:43:16 2026 GMT
            Not After : May 19 17:43:16 2026 GMT
        Subject: CN=6a0366b4-1dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:34:21:79:39:31:d4:97:b9:a9:5b:bb:f6:60:
                    d7:ee:8d:c7:87:58:b6:15:97:7f:68:2b:cf:5a:fa:
                    ef:c3:e1:44:ab:04:aa:1a:cd:d7:54:15:9c:17:34:
                    25:23:41:1c:8c:65:04:31:6a:f1:ab:e6:f4:74:ca:
                    54:34:04:37:a7:8e:10:07:cd:97:53:74:40:77:cb:
                    dc:e4:8e:21:eb:13:c7:ea:5c:83:ae:04:8b:17:de:
                    3f:37:72:1f:35:db:89:d0:94:a8:24:b9:7a:9b:a8:
                    39:2e:17:6a:c1:0f:45:c6:5f:1a:06:f9:7d:70:2b:
                    d3:14:9a:d5:65:21:17:90:1d:54:5b:f9:f6:fe:7e:
                    bd:4e:07:5f:cf:0a:e2:a6:4b:08:85:75:f9:af:d9:
                    27:cd:d4:f6:9c:4c:d9:9a:cb:72:6a:c3:a5:88:88:
                    9e:b2:2e:47:40:35:d3:67:3c:30:63:27:d8:6a:91:
                    bb:d6:02:a3:32:c2:17:f1:97:c7:99:b2:da:20:0d:
                    89:df:9d:7d:c3:c0:2c:2d:a0:48:bf:e5:e3:cb:7a:
                    04:0b:57:11:d9:00:f7:71:4e:80:b2:35:7b:fb:b5:
                    41:b8:3d:fb:56:c5:3b:ed:39:a9:d7:0f:15:29:9c:
                    bb:c5:74:bd:92:e8:a0:4f:21:9b:9f:26:11:99:40:
                    ed:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D2:30:3B:58:DE:78:6E:7B:02:62:AE:66:B7:64:FF:E8:A9:8C:D6
            X509v3 Authority Key Identifier:
                keyid:34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:66:b2:44:96:1f:79:ec:e0:76:3f:e5:d5:f9:6f:6c:f4:ad:
         ef:ae:63:70:9c:6b:4c:33:c8:d9:85:a6:4f:84:80:76:43:89:
         a8:00:0c:39:a0:ca:e6:d6:1d:c3:f4:fe:89:89:54:0d:5d:a3:
         41:09:3f:99:5d:c1:93:ab:db:12:bd:e4:2f:b3:a1:08:02:e5:
         77:ca:10:d0:55:8b:ec:98:e3:39:ba:bd:2e:b8:04:cb:56:44:
         12:1d:c2:c8:1e:13:27:fc:3b:ee:2c:45:75:84:33:54:a8:2d:
         86:4f:73:8f:8c:f0:b7:e5:3b:73:e3:0d:9f:5b:24:30:cf:62:
         ea:26:6d:80:ba:e6:ce:90:ad:99:e8:56:bd:e3:31:88:bc:82:
         ed:29:55:cf:3d:60:72:9b:f9:be:9b:9c:32:c5:20:ec:a0:e8:
         40:9f:e5:e0:6f:78:bc:a2:5a:a0:82:88:21:c2:cd:1b:0d:00:
         55:06:cc:e0:10:ee:11:51:6d:d8:c0:b6:ba:a2:35:8f:e5:64:
         de:b4:01:4e:c3:55:4f:aa:c8:7b:8f:04:50:21:6b:ee:3a:8b:
         b1:bf:9d:1e:7e:b0:f0:10:8f:87:a2:d5:6a:5a:37:74:a2:84:
         57:2a:21:f0:0b:f1:dc:58:1a:1d:eb:02:f0:4f:1c:5e:17:13:
         77:d9:95:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:13 2026 by rpki-client